SecurityScorecard presents security metrics that are easy to understand and present to upper management. It has given me ammo to change some low-hanging security settings without burdening my staff. Review collected by and hosted on G2.com.
There can be some false positive when looking at the scorecards of vendors because they may use cloud resources which are shared by other companies so malware sources or IP reputation might have been affected by the other companies using the same resource. Review collected by and hosted on G2.com.
Video Reviews
SecurityScorecard review
74 out of 75 Total Reviews for SecurityScorecard
Overall Review Sentiment for SecurityScorecard
Log in to view review sentiment.
SecurityScorecard provides a user-friendly platform that offers valuable insights into our cybersecurity posture. The ability to monitor our own and third-party vendors' security ratings helps us proactively address potential risks Review collected by and hosted on G2.com.
While SecurityScorecard provides valuable insights, some of the alerts can be too frequent or lack specificity, leading to alert fatigue. Additionally, the pricing structure may not be cost-effective for smaller organizations with tight budgets Review collected by and hosted on G2.com.
It's easy of use is what makes it good. You can have it deployed and running in no time, as it is hosted. There are many times where your scorecard will already to be ready t go. I have only run into 1-2 times where Security Scorecard did not have a website in its database, and I had to wait for them to go out and fetch it. Review collected by and hosted on G2.com.
Could use better inegrations with other systems. Review collected by and hosted on G2.com.
The data presented is valuable and insightful, it helps to kick starty conversations with vendors regarding their cybersec controls. There are plenty of features to gather data, evidence and contact with Vendors to understand their infosec posture. Review collected by and hosted on G2.com.
There is room to improve further the autoamted reporting capabilities. Review collected by and hosted on G2.com.
Accurate ratings and great customer service. Review collected by and hosted on G2.com.
Too much info is available. i find myself running down rabbit holes with a vendor - as if I am one of their network defenders. Review collected by and hosted on G2.com.
Great tool in moniotirng security score for own company and/or third parties. I like the folwing about Scorecard:
- Easy to understand
- Easy to use
- Customer Servie orientation
- Takes feedback to heart
- Allos to try out new features as a pilot Review collected by and hosted on G2.com.
- False positives
- No aggregate scoring for enire Enterprise Review collected by and hosted on G2.com.
I use it as one more input when reviewing the vendor security posture within the vendor security risk assessment process. I like it gives me detailed inputs to start asking things about the third party. The reports are detailed enough to submit them and wait for a targeted and not high-level answer. Review collected by and hosted on G2.com.
According to third-party feedback, unfortunately, it gives many false positives. I would say that 50% of the vendors I asked about Scorecard-> are not maintaining it and re-direct us to their security trust center with more accurate pentest on their domains. Review collected by and hosted on G2.com.
SecurityScoreCard (SCC) is not just an external security posture rating platform, but it is also external attack surface management. With all the public data available, it shows a mirror to organizations how exactly security looks from the outside.
With every organization now using SCC scores, a kind of social pressure has been created that every organization must maintain a mark security posture, which is overall good for the community. Review collected by and hosted on G2.com.
Anything related to your company name impacts the score, even your vendor services and all. Although that's the idea that the security posture of any company is not just its own infrastructure but all supplied ecosystem as well. However, sometimes test systems are also hosted with the same company domain, which can drop security scores a lot.
The assist discovery algorithm is not the best, especially for subdomains. Review collected by and hosted on G2.com.
- SS provides various reporting options that allow me to target my security results message according to my audience. This is critical as we use results as contract leverage - agreement from the vendor for security control maintenance which can be observed on SS
- SS has a responsive support team. which is critical to me on time-sensitive projects.
-- SS engages its customers regularly to help improve and grow their use of the SS, and to obtain useful feedback from their user base Review collected by and hosted on G2.com.
- SS must integrate Atlas with the rest of the product in order to create a holistic view of the vendor's security controls. If they do this, they have a powerhouse tool. Security controls go beyond what can be seen from the Internet or what is reported in the news. Administrative controls, awareness and phishing exercises I need to know about for a final score on a vendor.
- I would like it to be easier to manipulate the footprint/IP roster used to create reports. Case in point, I have business partners I assess who contract with an IT provider to manage their domain. I know the full score of the IT provider includes all domains it provides, and it is the true indicator of its security practices. But I need to report on the subdomain of my customer to gain credibility on my final assessment rating. Review collected by and hosted on G2.com.
Security Scorecard is one of the most easy-to-use, intuitive pieces of software I have used in my 36-year working history. It is useful from the time you start using it. Great dashboard display, which then allows you to go deeper into findings and then, as an added bonus - it tells you how to remediate the problem. The software is so good that I have purchased it in the past 3 security roles I have had. I recommend it to security people I know, who have all been "wowed" by it. And did I mention Support? Support is fantastic! Review collected by and hosted on G2.com.
There isn't a lot I dislike about Security Scorecard. In fact...I can't think of one item that annoys me! Maybe IF it included some information gathered from the Dark Web about my company... yeah, that would make it an 11/10 instead of a 10/10 rating. Review collected by and hosted on G2.com.
